asterisk users - Sep 2021 - problems with natted phones

There is always some risk. If there is a solution that should work, it
is best to use it. We just need the root cause, why it fails
sometimes.

Marek


2021-09-09 18:01 GMT+02:00, Antony Stone <Antony.Stone at
asterisk.open.source.it>:
> On Thursday 09 September 2021 at 17:56:10, Marek Greško wrote:
>
>> Hello,
>>
>> I would not like to open whole range of udp ports for rtp.
>
> Why not?  What is the risk?
>
> What would possibly be listening on UDP ports 10000 - 20000 (the Asterisk
> default range) which an external scanner / attacker could make use of?
>
>
> Antony.
>
> --
> Too many people spend money they haven't earned
> to buy things they don't want,
> to impress people they don't like.
>
>  - Will Rogers
>
>                                                    Please reply to the
list;
>                                                          please *don't*
CC
> me.
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> Check out the new Asterisk community forum at:
> https://community.asterisk.org/
>
> New to Asterisk? Start here:
>       https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users

Le 09/09/2021 à 18:15, Marek Greško a écrit :
> There is always some risk. If there is a solution that should work, it
> is best to use it. We just need the root cause, why it fails
> sometimes.
Like SIP ALG ? ;) Please explain which risk are existing if there is 
nothing listening on those ports ?
>
>
> 2021-09-09 18:01 GMT+02:00, Antony Stone <Antony.Stone at
asterisk.open.source.it>:
>> On Thursday 09 September 2021 at 17:56:10, Marek Greško wrote:
>>
>>> Hello,
>>>
>>> I would not like to open whole range of udp ports for rtp.
>> Why not?  What is the risk?
>>
>> What would possibly be listening on UDP ports 10000 - 20000 (the
Asterisk
>> default range) which an external scanner / attacker could make use of?
-- 
Daniel